Overview

overview

3

Static

static

3

49e3868161...18.exe

windows7-x64

3

49e3868161...18.exe

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows7-x64

3

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...ey.dll

windows7-x64

3

$PLUGINSDI...ey.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ex.dll

windows7-x64

3

$PLUGINSDI...ex.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    49e386816118abd9ec251b55ea744512_JaffaCakes118

  • Size

    108KB

  • MD5

    49e386816118abd9ec251b55ea744512

  • SHA1

    280d7830932806a762dd6d49047ac857f5303397

  • SHA256

    f73fa029ba9c34072bd6787608b257fe4c5fc59a40eb1a3e711e1b00f75749ae

  • SHA512

    feda10729a07316adb14928439427ca41b29a7a23271fdeeae2f8aad6eecb13a3abfdf03d07e71d535fc292d6c48b460fdcaa02ad960211cd1b1cedb992e14fc

  • SSDEEP

    3072:WkJM3t8Lgj7vQl3MlCNLgxtU/PezbJFXlvYQ:Sd8Licl8leVo/

Score
3/10

Malware Config

Signatures

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • 49e386816118abd9ec251b55ea744512_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    9c5b3cdb528c04f39612ea97ba05fa81


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    9d433976e02d79532f0d635ee81d0b20


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    815c88741b87a0210c457b00b57bf9c6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/MachineKey.dll
    .dll windows:4 windows x86 arch:x86

    373a46f2dac5b6d7b5b3f2780d9e54f0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/md5dll.dll
    .dll windows:4 windows x86 arch:x86

    e57536e0d3500471d52df7cea0d65a39


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/rc4hex.dll
    .dll windows:4 windows x86 arch:x86

    f74b9bcddcae417b38b2c5be37034174


    Headers

    Imports

    Exports

    Sections